Tyrant

Tyrant ransomware targets users in Iran and is distributed through malicious versions of the popular Psiphon virtual private network (VPN) application. A ransom note written in Farsi provides a contact email address of rastakhiz@protonmail.com and a Telegram username of @Ttyperns. Victims are instructed to pay a ransom equivalent to $15 within 24 hours through one of two local payment processors, exchanging.ir and webmoney724.ir.

Reference in this site to any specific commercial product, process, or service, or the use of any trade, firm or corporation name is for the information and convenience of the public, and does not constitute endorsement, recommendation, or favoring by the NJCCIC and the State of New Jersey.